Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA20CE1C0AB111F1B9DC7EBCDAE4EC9C.roa
File: AA20CE1C0AB111F1B9DC7EBCDAE4EC9C.roa (raw, json)
Hash identifier: Z/E3UB6t+sZz5RkzDYzcjOoLV858BjKP+5sIalDlK6A=
Subject key identifier: F4:4E:A2:BB:61:D9:5E:1C:AC:AC:32:89:28:41:7E:2D:E9:9A:3A:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA20CE1C0AB111F1B9DC7EBCDAE4EC9C.roa
Signing time: Sun 15 Feb 2026 21:02:41 +0000
ROA not before: Sun 15 Feb 2026 21:01:09 +0000
ROA not after: Thu 26 Feb 2026 21:01:09 +0000
asID: 22773
IP address blocks: 154.85.107.0/24 maxlen: 24
154.85.108.0/24 maxlen: 24
154.85.109.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.111.0/24 maxlen: 24
154.85.112.0/24 maxlen: 24
154.85.113.0/24 maxlen: 24
154.85.114.0/24 maxlen: 24
154.85.115.0/24 maxlen: 24
154.85.116.0/24 maxlen: 24
154.85.117.0/24 maxlen: 24
154.85.118.0/24 maxlen: 24
154.85.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113064 (0x1b9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 15 21:01:09 2026 GMT
Not After : Feb 26 21:01:09 2026 GMT
Subject: CN=69923471-6ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:0f:e1:05:85:85:34:90:61:5c:c0:99:dd:
9d:5f:46:c1:96:55:ea:2b:3d:30:ff:6e:14:b6:17:
45:12:5d:0b:bf:32:88:a0:71:de:6f:91:d8:80:9e:
d0:c7:f6:a8:9f:a5:6f:a8:27:f8:96:f6:71:d8:b7:
d6:e8:11:8a:2e:ad:d1:0f:9e:99:38:d7:c0:36:74:
11:ef:26:05:93:80:ca:19:59:2e:4d:f9:73:1b:24:
9e:48:a2:fe:aa:24:07:f2:3c:bc:42:b2:0c:b5:50:
88:f8:e9:02:df:9b:68:1f:a4:30:2d:29:3f:65:c0:
eb:63:e5:8d:1c:f6:3e:e8:52:fb:e0:fe:25:ed:56:
b8:55:f5:da:e3:34:bb:bd:93:bf:a7:64:3c:31:fe:
3f:a1:da:9f:f3:e3:c7:9c:7b:ac:a6:a3:ed:4b:01:
9e:40:97:74:f1:7e:70:31:cd:e2:63:3e:0f:9d:d8:
a1:aa:40:23:35:68:84:0f:ae:d3:fb:6b:40:e6:53:
bc:cc:62:ae:60:de:eb:05:c1:bd:cd:ee:4d:0e:06:
4e:fe:6a:dd:d2:df:78:0a:32:83:b7:2d:d5:52:3a:
0c:b3:51:ba:3f:36:83:c2:5a:2c:c5:ab:40:3a:b6:
06:25:20:c1:6f:df:cc:da:de:e6:72:77:4e:b8:c7:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4E:A2:BB:61:D9:5E:1C:AC:AC:32:89:28:41:7E:2D:E9:9A:3A:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA20CE1C0AB111F1B9DC7EBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.107.0-154.85.119.255
Signature Algorithm: sha256WithRSAEncryption
06:55:02:02:d2:42:c1:58:61:f2:24:4e:ee:21:31:1a:7a:62:
b3:20:d4:e7:6b:ef:e1:24:66:59:48:36:4d:1c:e1:04:75:7a:
1e:c3:87:37:4a:00:9c:32:57:71:6a:50:e7:54:71:5f:8c:2e:
1a:1f:8b:74:dc:f4:68:7b:f5:8a:e7:6b:b6:8d:db:79:9c:c1:
ab:af:1b:9c:b6:f2:b8:f2:eb:98:e8:e1:d9:b7:69:44:f2:00:
28:db:85:6d:01:73:d1:8c:51:b9:0e:c1:15:06:af:b7:fe:b6:
93:7c:b3:62:e5:d5:7a:61:7f:f5:e8:e4:3a:60:49:0b:6c:80:
a2:03:d4:a4:05:91:b9:24:46:03:a9:6a:16:31:23:7c:66:c3:
96:6c:d4:5f:60:02:68:83:4e:f9:bb:d1:0d:80:ac:6e:30:83:
0c:56:0c:ed:83:8c:f8:66:80:bb:c5:4a:bf:b9:a9:ba:90:32:
22:a5:06:c5:2a:86:5c:f7:9b:0a:c5:63:b6:23:24:32:2d:4f:
09:93:3e:dd:a7:3b:95:dc:37:72:e6:08:85:99:58:5b:89:f8:
02:dd:9d:e6:c1:f4:a3:0b:3d:ed:9a:fd:2b:b0:22:4c:75:d3:
7f:be:6b:d0:fe:8a:40:72:18:ac:68:f7:70:72:30:5f:bb:06:
4a:5d:82:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:25 2026 by rpki-client